2.1 - Identify and Classify Information and Assets CISSP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   How does the result of a data classification exercise directly influence the selection of security controls?

   • AIt specifies the exact security control to be used for every asset
   • BIt provides a baseline for applying controls that are proportional to the asset's sensitivity and criticality
   • CIt has no impact on security controls, which are determined solely by the IT department
   • DIt determines the budget for the IT department
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In the data classification process, who is ultimately responsible for assigning the initial classification level to a data asset?

   • AThe data custodian
   • BThe data owner
   • CThe end user
   • DThe system administrator
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the correct sequence of the first three steps in the asset classification process?

   • ACategorization, Identification, Documentation
   • BDocumentation, Labeling, Identification
   • CIdentification, Categorization, Labeling
   • DLabeling, Categorization, Identification
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A large enterprise is implementing a data classification program. The HR director has been assigned as the data owner for employee records. The IT department will manage the technical infrastructure. The CISO wants to clarify roles to ensure accountability. Which responsibility should be assigned to the data owner?

   • ADetermining the classification of the data and approving access rights.
   • BUsing the data in accordance with the organization's policies.
   • CImplementing technical controls such as encryption and backups.
   • DPerforming daily backups and restoring data when needed.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Why is maintaining an accurate asset inventory a critical first step in the asset classification process?

   • AIt eliminates the need for regular security audits
   • BIt provides a complete list of assets that need to be classified and protected
   • CIt ensures that all assets are protected with the same level of security controls
   • DIt is required by all international standards and laws
   Reveal Solution Discussion Select an answer first